Skip to main content
Jamf Nation, hosted by Jamf, is a knowledgeable community of Apple-focused admins and Jamf users. Join us in person at the ninth annual Jamf Nation User Conference (JNUC) this November for three days of learning, laughter and IT love.

Generating and Renewing an Apple Push Notification service (APNs) Certificate

Overview

This article explains how to create and renew an Apple Push Notification service (APNs) certificate. It also explains how to upload an APNs certificate to Jamf Pro.

Versions Affected

Jamf Pro v9.0 and later

Procedure

For complete instructions, see the following resources:

Like Comment
Order by:
SOLVED Posted: by Walter

APN no longer requires Enterprise Developer Program membership. Create. CSR IN keychain, save it to a file, and email it to support@jamfsoftware.com. Request that it be signed and returned. The returned certificate can be put into the JSS.

Like
SOLVED Posted: by stevewood

If you are running 8.43 it's even easier than that. The mighty fine folks at JAMF tied in your JAMF Nation account to allow you to create the CSR from them to send to Apple. Just go to Settings -> Global Mgmt -> Push Notification Cert and follow the onscreen directions for getting a new cert. You'll need your JAMF Nation user name and password, and from there it's pretty straight forward.

Steve

Like
SOLVED Posted: by CasperSally

We used the developer program to get the cert a year ago.

It expired yesterday (found out when I could no longer enroll devices) and after troubleshooting for awhile.

Today JAMF support explained how they can give me a free cert using the JAMF Nation account, but it will mean we need to reenroll all of our iOS devices. Ugh.

I'm torn what to do. We still have a developer account, renew that cert so I don't need to re-enroll our 160 devices... and hope that option sticks around for next year. Or we can switch now to the free cert now and bite the bullet and be forced to go re-enroll devices.

Does anyone know if the developer account cert will continue to be available?

Like
SOLVED Posted: by kagibson

Anybody seen in the CSR assistant, when I enter my Jamf Nation id, it says my Jamf nation account has not been verified ? Obviously it has as I am posting here...

Like
SOLVED Posted: by dokihara

i have the same issue. 8.43 and trying to set it up via JAMF Nation.

Like
JAMFBadge
SOLVED Posted: by jake

Hi Everyone \-

Please make sure your Company Email Address is correct in your profile. It must match up with our internal records so we can verify you are a customer.

https://jamfnation.jamfsoftware.com/tourManagingEmailAddresses.html

If it still isn't working and the correct address is in your profile, please let your account manager know and we will get you up and running.

Thanks!

Like
SOLVED Posted: by dokihara

thanks jake, I have emailed Ben Graham and Keith Jones. I am on a trial account.

Like
JAMFBadge
SOLVED Posted: by benjamin.michael
Like
SOLVED Posted: by itadmin-tps

I'm picking up from the previous IT administrator and don't know which account generated the original cert. What is the best way to renew the cert? Delete the existing cert and generate a new one? Anything else that needs to be done to the devices that are already managed? Thanks.

Like
JAMFBadge
SOLVED Posted: by john.miller

Hey @itadmin-tps !

We’re you able to find what you needed regarding the push cert? I noticed your comment so wanted to make sure we were able to help as needed.

Thanks!

Like
SOLVED Posted: by mpout

@john.miller Hey we're not quite there yet BUT in the new year our APNs cert will require updating and the guy who did it originally has now left the company. what's the best way for us to renew it? Really conscious I don't want all our machines to drop out of management so just want to check, double check and triple check that we will be doing it the right way.

Like

Jamf would like to hear your feedback around Restrictions payload (computers and devices)